CRITICAL🇵🇱 Wersja polska

CVE-2025-11543

CVSS 9.5v4.0pub. 2025-12-22upd. 2026-01-15

Improper Validation of Integrity Check Value vulnerability in Sharp Display Solutions projectors allows a attacker may create and run unauthorized firmware.

🤖 AI Analysis
How it works

The device does not properly verify the integrity of the loaded firmware (CWE-354 — Improper Validation of Integrity Check Value). An attacker can prepare a malicious firmware image that will pass the verification process and be installed on the projector. After installation, the unauthorized firmware gains full control over the device at the hardware level.

Impact

An attacker can permanently compromise the device by installing malicious firmware, gaining full control over the projector and potentially over the network to which it is connected (high impact on confidentiality, integrity and availability of both the system and system resources).

Mitigation & patch

Patches available from the manufacturer should be applied in accordance with references published at: https://sharp-displays.jp.sharp/global/support/info/PJ-CVE-2025-11540.html

Who is affected

Sharp Display Solutions projectors: Sharp NP-UM352W+, Sharp NP-P502WL, Sharp NP-P502WL-2, Sharp NP-P452HG (firmware versions indicated in the manufacturer's references)

Analysis generated by Claude AI (Anthropic) based on NVD data. Always verify with vendor.
CVSS Vector
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

  • Sharp Np Cr5450h

    HW
    Sharp
    all versions

  • Sharp Np Cr5450h Firmware

    OS
    Sharp
    all versions

  • Sharp Np Cr5450hl

    HW
    Sharp
    all versions

  • Sharp Np Cr5450hl Firmware

    OS
    Sharp
    all versions

  • Sharp Np Cr5450w

    HW
    Sharp
    all versions

  • Sharp Np Cr5450w Firmware

    OS
    Sharp
    all versions

  • Sharp Np Cr5450wl

    HW
    Sharp
    all versions

  • Sharp Np Cr5450wl Firmware

    OS
    Sharp
    all versions

  • Sharp Np P452h

    HW
    Sharp
    all versions

  • Sharp Np P452h Firmware

    OS
    Sharp
    all versions

  • Sharp Np P452hg

    HW
    Sharp
    all versions

  • Sharp Np P452hg Firmware

    OS
    Sharp
    all versions

  • Sharp Np P452w

    HW
    Sharp
    all versions

  • Sharp Np P452w Firmware

    OS
    Sharp
    all versions

  • Sharp Np P452wg

    HW
    Sharp
    all versions

  • Sharp Np P452wg Firmware

    OS
    Sharp
    all versions

  • Sharp Np P502h

    HW
    Sharp
    all versions

  • Sharp Np P502h\+

    HW
    Sharp
    all versions

  • Sharp Np P502h Firmware

    OS
    Sharp
    all versions

  • Sharp Np P502h\+ Firmware

    OS
    Sharp
    all versions

  • Sharp Np P502hg

    HW
    Sharp
    all versions

  • Sharp Np P502hg Firmware

    OS
    Sharp
    all versions

  • Sharp Np P502hl

    HW
    Sharp
    all versions

  • Sharp Np P502hl\+

    HW
    Sharp
    all versions

  • Sharp Np P502hl 2

    HW
    Sharp
    all versions

  • Sharp Np P502hl 2 Firmware

    OS
    Sharp
    all versions

  • Sharp Np P502hl Firmware

    OS
    Sharp
    all versions

  • Sharp Np P502hl\+ Firmware

    OS
    Sharp
    all versions

  • Sharp Np P502hlg

    HW
    Sharp
    all versions

  • Sharp Np P502hlg 2

    HW
    Sharp
    all versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2025-11540CRITICAL9.1PL ✓same product

Path Traversal w projektorach Sharp Display Solutions

CVE-2025-11541CRITICAL9.2PL ✓same product

Stack-based Buffer Overflow w projektorach Sharp Display Solutions

CVE-2025-11542HIGH8.4same product

Stack-based Buffer Overflow vulnerability in Sharp Display Solutions projectors allows a attacker may execute ...

CVE-2019-3929CRITICAL9.8⚠ KEVPL ✓same vendor

Command injection w endpoint file_transfer.cgi — RCE jako root bez uwierzytelnienia

CVE-2025-12049CRITICAL9.2PL ✓same vendor

Brak uwierzytelnienia w Sharp Media Player MP-01 — dostęp do interfejsu webowego